runlease

Privacy notice

Draft for review. Applies to the public relay at connect.runlease.online and to this website.

Runlease is open source software that you run yourself. This notice covers the two things we operate: the public relay and this website. It does not cover relays that other people run.

The short version

To use the public relay you sign in with a Google account. We receive your email address and nothing else from Google. The relay carries your sessions as encrypted traffic that it cannot read. We keep connection logs for a limited time to run the service and to deal with abuse.

What we collect

WhatWhyKept for
Your Google account email address, when you sign in with runlease loginTo apply your tier's limits and to contact you about your use of the serviceWhile you use the service, and up to 90 days in logs
When you open and close a relay slot, and the first characters of its tokenTo enforce limits and investigate abuseUp to 90 days
Network addresses that connect to the relay, and the amount of data carriedTo operate and protect the serviceUp to 90 days
Standard web server logs for this websiteTo operate the siteAs kept by the hosting provider

What we do not collect

Who we share it with

We do not sell personal data. The relay runs on Google Cloud and this site is served by GitHub Pages; both process data on our behalf as hosting providers. We disclose data when the law requires it.

Your choices

runlease logout removes the saved sign-in from your machine. You can remove the app's access in your Google account's security settings. To ask for the data we hold about your email address, or to have it deleted, write to privacy@marshal.codes.

If you would rather we see nothing at all, run your own relay. It is the same software.

Changes

We will update this page when the practice changes, and note the date at the top.